Examples¶
One runnable demo under examples/.
examples/serve/¶
Launches a tiny in-process MCP server (the same shape as cli-mcp would expose for a real CLI), then runs cli-web-ops over MCP stdio against it. Binds 127.0.0.1 only with the DangerouslyAllowAllAuth STUB.
go run ./examples/serve
# cli-web-ops dev-local server on http://127.0.0.1:8443
The demo ships three tools (echo / slow / danger) annotated as webops.favorite:
- Echo a message - smoke test the request → MCP → response → SSE path.
- Slow stream - prove the SSE streaming surface works for multi-line output.
- DROP THINGS - red confirm button, demonstrating
tool.Annotations.DestructiveHint.
Production posture¶
Bare cli-web-ops is for dev. For production, follow deploy/Caddyfile.example: Caddy in front for TLS + auth (caddy-security WebAuthn), cli-web-ops bound to localhost. Threat model details: Features → Threat model.